what to do about joe-jobs?, was: Re: Another DNS...
David Raistrick
drais at wow.atlasta.net
Wed Sep 24 17:48:27 UTC 2003
On Wed, 24 Sep 2003, Justin Shore wrote:
<snip>
> joe-job earlier this week. Apparently the joe-jobbing was enough to
> convince some extremely ignorant mail admins that Compu.net is spamming
> and blocked mail from compu.net. Compu.net has also seen the effects of
Speaking of joe-jobs, what's the "proper" proceedure for dealing with
such? The company I work for is currently undergoing an admitedly minor
joe-job. (about 300 or so bounces that I've seen since mid last week or
so.)
Any suggestions for dealing with this?
A current count and list of last-source IPs so far are listed below:
40 152.163.225.154
5 216.93.66.93
5 205.138.96.56
4 216.93.66.90
4 216.93.66.87
3 63.226.138.21
3 216.93.66.95
3 216.93.66.94
3 216.93.66.91
3 216.93.66.86
3 216.93.66.83
3 193.70.192.90
2 64.58.4.45
2 64.58.4.41
2 64.12.138.3
2 64.12.138.17
2 62.79.79.110
2 62.58.50.89
2 216.93.66.85
2 216.93.66.80
2 216.190.15.195
2 216.170.230.85
2 209.81.147.229
2 207.181.101.13
2 204.97.92.20
2 200.221.11.51
2 199.46.198.233
2 199.171.96.5
1 69.57.207.194
1 67.92.168.237
1 67.92.168.236
1 66.98.162.42
1 66.40.221.254
1 66.218.66.90
1 66.218.66.104
1 66.147.14.221
1 66.132.147.79
1 66.118.64.13
1 66.118.64.12
1 65.54.251.76
1 65.54.237.68
1 65.54.165.146
1 65.24.0.113
1 65.24.0.112
1 65.221.240.107
1 64.72.200.50
1 64.7.153.18
1 64.58.4.44
1 64.51.58.8
1 64.30.1.165
1 64.27.65.25
1 64.255.237.183
1 64.233.50.135
1 64.141.33.31
1 64.12.138.5
1 64.12.138.22
1 64.12.138.21
1 64.12.138.19
1 64.12.138.1
1 63.65.184.152
1 63.65.120.64
1 63.236.115.2
1 63.226.138.22
1 63.220.222.103
1 63.172.164.162
1 63.146.184.41
1 62.81.134.6
1 62.58.50.88
1 62.58.50.87
1 62.253.162.46
1 62.163.139.96
1 62.151.8.31
1 62.151.8.30
1 62.117.40.69
1 61.6.32.154
1 61.185.36.130
1 61.129.163.105
1 57.250.224.237
1 38.115.133.179
1 24.92.226.25
1 24.92.226.159
1 24.75.44.123
1 219.94.53.243
1 217.15.34.130
1 216.93.66.92
1 216.93.66.89
1 216.93.66.82
1 216.93.66.81
1 216.93.24.2
1 216.60.154.2
1 216.55.26.70
1 216.39.128.16
1 216.3.58.2
1 216.241.29.119
1 216.238.0.22
1 216.235.160.81
1 216.176.128.9
1 216.170.230.86
1 216.17.128.133
1 216.163.120.8
1 216.141.24.3
1 216.139.64.35
1 216.126.204.154
1 216.115.81.3
1 216.113.192.65
1 213.63.193.16
1 213.56.31.20
1 213.228.0.191
1 213.193.13.83
1 213.193.13.82
1 212.78.66.183
1 212.26.128.10
1 212.250.7.7
1 212.216.176.223
1 212.216.176.185
1 212.20.195.131
1 212.166.64.99
1 212.106.140.5
1 211.43.197.64
1 211.43.197.54
1 210.86.15.146
1 210.59.228.24
1 210.116.116.31
1 209.53.150.130
1 209.53.147.17
1 209.42.47.69
1 209.242.224.42
1 209.214.216.60
1 209.196.77.103
1 209.104.62.3
1 208.34.108.125
1 208.236.9.12
1 208.223.124.36
1 208.197.227.11
1 208.197.227.10
1 208.136.106.6
1 208.13.39.139
1 207.71.36.233
1 207.70.175.249
1 207.54.158.40
1 207.241.196.7
1 207.195.212.6
1 207.115.64.115
1 207.115.63.70
1 206.64.143.9
1 206.30.164.20
1 205.232.46.4
1 205.188.159.13
1 204.60.105.46
1 204.253.83.42
1 204.111.11.45
1 203.87.94.3
1 203.199.83.25
1 203.199.211.196
1 203.179.51.34
1 202.37.101.20
1 202.138.0.51
1 199.197.130.1
1 198.5.241.38
1 198.185.163.3
1 198.165.106.2
1 195.85.130.97
1 195.62.32.27
1 195.238.3.56
1 195.238.2.127
1 195.206.80.98
1 195.167.192.88
1 195.149.39.8
1 194.47.245.158
1 194.158.97.218
1 194.125.133.231
1 193.71.71.240
1 193.70.192.59
1 193.70.192.54
1 193.252.22.23
1 193.246.86.43
1 193.2.4.66
1 192.139.197.95
1 17.254.13.22
1 165.76.4.115
1 165.21.74.85
1 165.21.74.73
1 165.21.74.70
1 161.155.123.57
1 161.114.1.209
1 161.114.1.207
1 158.116.149.131
1 151.164.30.67
1 144.140.254.13
1 142.77.1.52
1 142.110.131.131
1 138.194.2.8
1 132.156.11.189
1 131.228.20.21
1 130.244.199.150
1 130.227.241.162
1 129.12.21.15
1 129.11.16.35
1 128.242.238.173
1 12.9.139.96
1 12.155.160.2
Total: 308
---
david raistrick
drais at atlasta.net http://www.expita.com/nomime.html
More information about the NANOG
mailing list